
$ rpki-client -vvf rpki-rsync.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/3131342e3139392e3130372e302f32342d3234203d3e203234353235.roa
File: 3131342e3139392e3130372e302f32342d3234203d3e203234353235.roa (raw, json)
Hash identifier: 3rE7XponRj5WY2BxUhxF3o3t/3I59EN630HGGLNvHEk=
Subject key identifier: C9:6C:56:C3:D1:82:80:2C:66:D6:E2:65:A6:66:F8:47:FD:3A:56:25
Certificate issuer: /CN=167383438D537B2E966FD22726DD3B827DF002FE
Certificate serial: 150D1C7515D5AC6F2769E660F42756FC37F39B23
Authority key identifier: 16:73:83:43:8D:53:7B:2E:96:6F:D2:27:26:DD:3B:82:7D:F0:02:FE
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/167383438D537B2E966FD22726DD3B827DF002FE.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/3131342e3139392e3130372e302f32342d3234203d3e203234353235.roa
Signing time: Sun 03 May 2026 03:08:48 +0000
ROA not before: Sun 03 May 2026 03:03:48 +0000
ROA not after: Sun 02 May 2027 03:08:48 +0000
asID: 24525
IP address blocks: 114.199.107.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/167383438D537B2E966FD22726DD3B827DF002FE.crl
rsync://rpki-rsync.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/167383438D537B2E966FD22726DD3B827DF002FE.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/167383438D537B2E966FD22726DD3B827DF002FE.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 20:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:0d:1c:75:15:d5:ac:6f:27:69:e6:60:f4:27:56:fc:37:f3:9b:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=167383438D537B2E966FD22726DD3B827DF002FE
Validity
Not Before: May 3 03:03:48 2026 GMT
Not After : May 2 03:08:48 2027 GMT
Subject: CN=C96C56C3D182802C66D6E265A666F847FD3A5625
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:3a:9b:8e:0f:42:1a:68:c8:4f:37:43:a4:51:
a1:99:22:5b:e2:c0:71:63:0b:42:8f:da:71:ae:1b:
92:e7:b8:ef:15:d4:32:ee:ab:d0:af:e1:de:3c:c3:
bd:e9:5f:83:77:7b:56:47:67:d6:e9:2b:c6:67:89:
6d:47:48:fb:de:cc:a6:6d:25:fd:78:11:b2:f4:50:
2e:82:ee:de:e7:3d:89:08:b5:1b:0e:90:0d:b0:1d:
2a:fc:1e:af:cc:59:e5:b4:1a:bb:87:3b:7c:c0:06:
4c:33:a7:20:27:3b:de:51:00:3a:97:59:58:c2:e8:
41:89:c9:11:7e:df:b6:21:3c:79:2e:79:35:82:6f:
58:2b:c3:69:04:46:53:9b:f6:7b:68:82:28:9c:59:
63:c5:77:3b:b2:85:14:69:62:d1:11:b0:06:38:6d:
dc:15:99:dd:c3:11:59:e7:6b:7c:6d:67:af:ac:75:
e3:02:ed:e5:ae:a7:c2:74:75:08:04:3c:a7:cb:98:
41:a8:65:07:be:86:98:8b:49:32:99:95:49:dc:36:
d5:01:8e:a6:80:ab:d9:ae:8f:4d:36:fe:92:cd:b9:
c2:99:73:7f:6d:ea:b6:9b:22:1d:94:4e:8d:de:89:
c4:0a:d2:2c:57:97:27:f9:4b:d2:44:82:76:bf:3c:
eb:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:6C:56:C3:D1:82:80:2C:66:D6:E2:65:A6:66:F8:47:FD:3A:56:25
X509v3 Authority Key Identifier:
keyid:16:73:83:43:8D:53:7B:2E:96:6F:D2:27:26:DD:3B:82:7D:F0:02:FE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/167383438D537B2E966FD22726DD3B827DF002FE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/167383438D537B2E966FD22726DD3B827DF002FE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/3131342e3139392e3130372e302f32342d3234203d3e203234353235.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
114.199.107.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:77:c0:4f:ea:cb:a5:5c:0f:62:d1:d9:27:e0:1e:8c:9b:34:
7f:50:bf:92:46:11:6a:e5:66:39:de:80:79:5d:50:6a:1b:4a:
13:7c:9f:8f:28:86:a5:af:61:21:2a:62:0d:1c:cd:61:51:1a:
ec:74:50:04:51:ed:0b:fc:7d:a6:29:57:75:4c:bc:b0:e9:87:
90:84:88:bf:58:bc:c9:c1:bc:41:7d:2c:27:ab:29:c3:ff:7e:
53:86:18:6e:e3:fa:d8:58:71:8d:59:40:d8:4a:6a:bf:b8:fd:
fa:04:c5:88:5a:c7:8d:e8:04:af:9e:74:bd:67:46:73:eb:f7:
ef:6a:16:c5:2d:50:fe:78:b5:ee:1e:29:e4:0b:38:08:31:14:
18:af:18:ac:f6:22:3e:39:95:d9:94:bd:76:c7:eb:12:ef:fc:
f5:74:c3:e6:3d:a5:e1:c2:0f:96:fd:a6:49:39:9b:ed:c5:d5:
29:fa:9c:b7:97:d6:d4:7c:1c:bb:ff:06:d9:6f:9b:3c:ac:6f:
30:e9:14:42:1e:d9:f4:76:3c:e0:8b:e0:2a:8c:ba:8b:fd:19:
c0:c7:65:29:a5:ae:ba:6e:38:2a:75:e5:ca:c7:d8:64:e1:77:
c1:cd:31:80:29:2e:18:ef:d5:a1:92:53:9f:93:b1:53:ee:2c:
ab:1f:be:0a
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUFQ0cdRXVrG8naeZg9CdW/DfzmyMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTY3MzgzNDM4RDUzN0IyRTk2NkZEMjI3MjZERDNCODI3
REYwMDJGRTAeFw0yNjA1MDMwMzAzNDhaFw0yNzA1MDIwMzA4NDhaMDMxMTAvBgNV
BAMTKEM5NkM1NkMzRDE4MjgwMkM2NkQ2RTI2NUE2NjZGODQ3RkQzQTU2MjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDqOpuOD0IaaMhPN0OkUaGZIlvi
wHFjC0KP2nGuG5LnuO8V1DLuq9Cv4d48w73pX4N3e1ZHZ9bpK8ZniW1HSPvezKZt
Jf14EbL0UC6C7t7nPYkItRsOkA2wHSr8Hq/MWeW0GruHO3zABkwzpyAnO95RADqX
WVjC6EGJyRF+37YhPHkueTWCb1grw2kERlOb9ntogiicWWPFdzuyhRRpYtERsAY4
bdwVmd3DEVnna3xtZ6+sdeMC7eWup8J0dQgEPKfLmEGoZQe+hpiLSTKZlUncNtUB
jqaAq9muj002/pLNucKZc39t6rabIh2UTo3eicQK0ixXlyf5S9JEgna/POsLAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUyWxWw9GCgCxm1uJlpmb4R/06ViUwHwYDVR0j
BBgwFoAUFnODQ41Tey6Wb9InJt07gn3wAv4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
ZDFmNGZkMzgtNzgyNi00MjAxLTlmOWItMWQ3Yzc2YWEyNGRkLzAvMTY3MzgzNDM4
RDUzN0IyRTk2NkZEMjI3MjZERDNCODI3REYwMDJGRS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS8xNjczODM0MzhENTM3QjJFOTY2RkQyMjcyNkREM0I4MjdERjAw
MkZFLmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2QxZjRmZDM4LTc4MjYtNDIwMS05
ZjliLTFkN2M3NmFhMjRkZC8wLzMxMzEzNDJlMzEzOTM5MmUzMTMwMzcyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzMjM0MzUzMjM1LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAcsdrMA0GCSqG
SIb3DQEBCwUAA4IBAQBtd8BP6sulXA9i0dkn4B6MmzR/UL+SRhFq5WY53oB5XVBq
G0oTfJ+PKIalr2EhKmINHM1hURrsdFAEUe0L/H2mKVd1TLyw6YeQhIi/WLzJwbxB
fSwnqynD/35Thhhu4/rYWHGNWUDYSmq/uP36BMWIWseN6ASvnnS9Z0Zz6/fvahbF
LVD+eLXuHinkCzgIMRQYrxis9iI+OZXZlL12x+sS7/z1dMPmPaXhwg+W/aZJOZvt
xdUp+py3l9bUfBy7/wbZb5s8rG8w6RRCHtn0djzgi+AqjLqL/RnAx2Uppa66bjgq
deXKx9hk4XfBzTGAKS4Y79WhklOfk7FT7iyrH74K
-----END CERTIFICATE-----
Generated at Wed May 13 04:19:03 2026 by rpki-client